They have a website that can be used to host malware and/or seo link farms.

I still have nightmares about the contact form on my low-stakes personal website getting hijacked to use as a spam sender (because I used unsanitized input in mail headers).